APT report for 2018-11-23

TRANSNATIONAL / UNKNOWN

1. Criminal turf war may be brewing after Magecart double whammy
2. Synthetic identity fraud to drive $48 billion in annual losses by 2023 – Juniper Research
3. The team discuss continuing activity by the Magecart group, as well as the ways in which #cybercriminals are gearing up

CHINA

4. US Says China Increased Hacking over Trade Dispute

INDIA

Nil

NORTH KOREA

5. North Korean Hackers Hit Latin American Banks

PAKISTAN

Nil

VIETNAM

Nil

IRAN

Nil

IRAQ

Nil

LEBANON

Nil

PALESTINE

Nil

SAUDI ARABIA

Nil

SYRIA

Nil

TURKEY

Nil

UNITED ARAB EMIRATES

Nil

YEMEN

Nil

RUSSIA

6. Week in security with Tony Anscombe
7. Phishing Used to Launch GreyEnergy's ICS Attacks
8. Exclusive Cybaze ZLab – Yoroi – Hunting Cozy Bear, new campaign, old habits

SERBIA

Nil

UKRAINE

Nil

Platform report for 2018-11-23

WINDOWS

1. NUI Galway’s Problem: Misplaced USB Flash Drive Containing Unencrypted Student Records
2. New Emotet Thanksgiving campaign differs from previous ones

LINUX

3. New Crypto-Miner Attacks Linux Machines, Kills Other Miners and Anti-Malware
4. DoS Vulnerabilities Found in Linux Kernel, Unpatched
5. Malware scum want to build a Linux botnet using Mirai
6. New Linux crypto-miner steals your root password and disables your antivirus
7. New Crypto Malware Spreading that Infects Linux Machines & Removes Anti-Virus

UNIX

Nil

ANDROID

8. Over 500k Play Store users have installed 13 games that contain malware

IOS

Nil

MACOS

9. VMware fixed Workstation flaw disclosed at the Tianfu Cup PWN competition

Threat report for 2018-11-23

DATA BREACH & DATA LOSS

1. NUI Galway’s Problem: Misplaced USB Flash Drive Containing Unencrypted Student Records
2. Data breach in OSIsoft
3. Brazil's largest professional association suffers massive data leak
4. Amazon Snafu Exposed Customers' Names and Email Addresses
5. “Back in Black” – Article 13 has YouTube threatening to pull the plug over upload filter
6. New Emotet Thanksgiving campaign differs from previous ones
7. US Postal Service Website Left Data Exposed for Over a Year
8. .@Amazon unveils new settings to help users avoid S3 data leaks, but UpGuard's Chris Vickery, who uncovered most #AWS exposures,
9. Exclusive Cybaze ZLab – Yoroi – Hunting Cozy Bear, new campaign, old habits
10. A #phishing campaign was recently found to be hijacking the traffic of @Trezor user #cryptocurrency wallets. Learn how such an
11. Software company OSIsoft has suffered a data breach
12. SAVE 50% FOR BLACK FRIDAY! Get half off FREEDOME VPN and TOTAL with coupon code BLACKFRIDAY.
13. DNS Shell – Tool to Compromise and Maintain Control Over Victim Machine
14. @FSecure fait son #BlackFriday ! Profitez de 50% de remise sur une sélection de produits !
15. 60 million users’ data were exposed by the US Postal Service

DENIAL-OF-SERVICE

16. Why e-commerce needs DDoS protection for Cyber Monday

MALVERTISING

Nil

PHISHING

17. 8 tips for avoiding phishing, malware, scams, and hacks while holiday shopping online
18. New Linux crypto-miner steals your root password and disables your antivirus
19. Attackers Are Landing Email Inboxes Without the Need to Phish
20. Do you know the top myths and facts of #mobile #phishing? If not, don't worry, we've compiled a list of
21. Phishing Used to Launch GreyEnergy's ICS Attacks
22. Southwest Washington Regional Surgery Center suffered a Phishing attack
23. A #phishing campaign was recently found to be hijacking the traffic of @Trezor user #cryptocurrency wallets. Learn how such an

WEB DEFACEMENT

Nil

BOTNET

24. Malware scum want to build a Linux botnet using Mirai
25. Deep Instinct recently blogged about a new #botnet -- dubbed #Mylobot -- that has shown new, complex tools and techniques.

RANSOMWARE

26. SMBs suffered the brunt of ransomware attacks in 2018
27. The number of ransomware attacks on individuals has come down as it has become harder to get them to pay,

CRYPTOMINING & CRYPTOCURRENCIES

28. Cryptocurrency ‘minting’ flaw could have leached money from exchanges
29. A #phishing campaign was recently found to be hijacking the traffic of @Trezor user #cryptocurrency wallets. Learn how such an

MALWARE

30. 8 tips for avoiding phishing, malware, scams, and hacks while holiday shopping online
31. New Crypto-Miner Attacks Linux Machines, Kills Other Miners and Anti-Malware
32. Malware scum want to build a Linux botnet using Mirai
33. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
34. Black Friday special by Emotet: Filling inboxes with infected XML macros
35. Black Friday special by Emotet: Filling inboxes with infected XML macros
36. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
37. VMware patches guest-to-host malware vulnerability
38. #WebCache poisoning poses a serious threat to #BrowserSecurity. Learn how #hackers can use unkeyed inputs for malicious intent from expert
39. Best way to Remove Malware on Mac, Including Other Unwanted Apps
40. New Crypto Malware Spreading that Infects Linux Machines & Removes Anti-Virus
41. Over 500k Play Store users have installed 13 games that contain malware

EXPLOIT

Nil

VULNERABILITY

42. DoS Vulnerabilities Found in Linux Kernel, Unpatched
43. Apache Hadoop spins cracking code injection vulnerability YARN
44. German e-government SDK patched against ID spoofing vulnerability
45. US Postal Service Plugs API Flaw - One Year Later
46. VMware fixed Workstation flaw disclosed at the Tianfu Cup PWN competition
47. Adobe Flash Player Remote Code Execution Vulnerability Threat Alert
48. Old Printer Vulnerabilities Die Hard
49. VMware Patches Workstation Flaw Disclosed at Hacking Contest
50. Cryptocurrency ‘minting’ flaw could have leached money from exchanges
51. USPS Bug affects 60 Million Users, Finally Fixed.
52. German eID vulnerability allows hackers to change identities
53. VMware patches guest-to-host malware vulnerability
54. Internet connected devices might be the hot item for Christmas this year, but are they secure?
55. Hacker says USPS ignored serious security flaw for over a year
56. CVE-2018-6983: integer overflow vulnerability in VMware Workstation and Fusion

Region brief for 2018-11-23

ASIA

1. US Says China Increased Hacking over Trade Dispute
2. North Korean Hackers Hit Latin American Banks
3. VMware fixed Workstation flaw disclosed at the Tianfu Cup PWN competition
4. Adobe Flash Player Remote Code Execution Vulnerability Threat Alert
5. VMware Patches Workstation Flaw Disclosed at Hacking Contest

OCEANIA

Nil

NORTH AMERICA

6. Data breach in OSIsoft
7. US Postal Service Plugs API Flaw - One Year Later
8. US Says China Increased Hacking over Trade Dispute
9. North Korean Hackers Hit Latin American Banks
10. VMware fixed Workstation flaw disclosed at the Tianfu Cup PWN competition
11. New Emotet Thanksgiving campaign differs from previous ones
12. US Postal Service Website Left Data Exposed for Over a Year
13. Hacker says USPS ignored serious security flaw for over a year
14. Synthetic identity fraud to drive $48 billion in annual losses by 2023 – Juniper Research
15. Exclusive Cybaze ZLab – Yoroi – Hunting Cozy Bear, new campaign, old habits
16. Southwest Washington Regional Surgery Center suffered a Phishing attack
17. 60 million users’ data were exposed by the US Postal Service
18. The team discuss continuing activity by the Magecart group, as well as the ways in which #cybercriminals are gearing up

SOUTH AMERICA

19. Brazil's largest professional association suffers massive data leak

EUROPE

20. NUI Galway’s Problem: Misplaced USB Flash Drive Containing Unencrypted Student Records
21. New Crypto-Miner Attacks Linux Machines, Kills Other Miners and Anti-Malware
22. German e-government SDK patched against ID spoofing vulnerability
23. Phishing Used to Launch GreyEnergy's ICS Attacks
24. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
25. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
26. German eID vulnerability allows hackers to change identities
27. Exclusive Cybaze ZLab – Yoroi – Hunting Cozy Bear, new campaign, old habits

AFRICA

Nil

Sector brief for 2018-11-23

HEALTHCARE

1. US Says China Increased Hacking over Trade Dispute
2. Southwest Washington Regional Surgery Center suffered a Phishing attack

TRANSPORT

3. US Says China Increased Hacking over Trade Dispute

BANKING & FINANCE

4. North Korean Hackers Hit Latin American Banks
5. New Emotet Thanksgiving campaign differs from previous ones
6. Synthetic identity fraud to drive $48 billion in annual losses by 2023 – Juniper Research

INFORMATION & TELECOMMUNICATION

7. New Crypto-Miner Attacks Linux Machines, Kills Other Miners and Anti-Malware
8. Do you know the top myths and facts of #mobile #phishing? If not, don't worry, we've compiled a list of
9. “Back in Black” – Article 13 has YouTube threatening to pull the plug over upload filter
10. Internet connected devices might be the hot item for Christmas this year, but are they secure?
11. SAVE 50% FOR BLACK FRIDAY! Get half off FREEDOME VPN and TOTAL with coupon code BLACKFRIDAY.
12. The number of ransomware attacks on individuals has come down as it has become harder to get them to pay,
13. Over 500k Play Store users have installed 13 games that contain malware

FOOD

Nil

WATER

Nil

ENERGY

14. US Says China Increased Hacking over Trade Dispute

GOVERNMENT & PUBLIC SERVICE

15. German e-government SDK patched against ID spoofing vulnerability
16. US Says China Increased Hacking over Trade Dispute
17. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
18. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
19. US Postal Service Website Left Data Exposed for Over a Year
20. Exclusive Cybaze ZLab – Yoroi – Hunting Cozy Bear, new campaign, old habits
21. 60 million users’ data were exposed by the US Postal Service

Daily brief for 2018-11-23

ASIA

1. US Says China Increased Hacking over Trade Dispute
2. North Korean Hackers Hit Latin American Banks
3. VMware fixed Workstation flaw disclosed at the Tianfu Cup PWN competition
4. Adobe Flash Player Remote Code Execution Vulnerability Threat Alert
5. VMware Patches Workstation Flaw Disclosed at Hacking Contest

WORLD

6. NUI Galway’s Problem: Misplaced USB Flash Drive Containing Unencrypted Student Records
7. Data breach in OSIsoft
8. New Crypto-Miner Attacks Linux Machines, Kills Other Miners and Anti-Malware
9. Brazil's largest professional association suffers massive data leak
10. German e-government SDK patched against ID spoofing vulnerability
11. US Postal Service Plugs API Flaw - One Year Later
12. US Says China Increased Hacking over Trade Dispute
13. North Korean Hackers Hit Latin American Banks
14. VMware fixed Workstation flaw disclosed at the Tianfu Cup PWN competition
15. Phishing Used to Launch GreyEnergy's ICS Attacks
16. New Emotet Thanksgiving campaign differs from previous ones
17. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
18. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
19. US Postal Service Website Left Data Exposed for Over a Year
20. German eID vulnerability allows hackers to change identities
21. Hacker says USPS ignored serious security flaw for over a year
22. Synthetic identity fraud to drive $48 billion in annual losses by 2023 – Juniper Research
23. Exclusive Cybaze ZLab – Yoroi – Hunting Cozy Bear, new campaign, old habits
24. Southwest Washington Regional Surgery Center suffered a Phishing attack
25. 60 million users’ data were exposed by the US Postal Service
26. The team discuss continuing activity by the Magecart group, as well as the ways in which #cybercriminals are gearing up

ATTACKS

27. NUI Galway’s Problem: Misplaced USB Flash Drive Containing Unencrypted Student Records
28. Data breach in OSIsoft
29. 8 tips for avoiding phishing, malware, scams, and hacks while holiday shopping online
30. Brazil's largest professional association suffers massive data leak
31. Amazon Snafu Exposed Customers' Names and Email Addresses
32. New Linux crypto-miner steals your root password and disables your antivirus
33. Attackers Are Landing Email Inboxes Without the Need to Phish
34. Do you know the top myths and facts of #mobile #phishing? If not, don't worry, we've compiled a list of
35. “Back in Black” – Article 13 has YouTube threatening to pull the plug over upload filter
36. Phishing Used to Launch GreyEnergy's ICS Attacks
37. New Emotet Thanksgiving campaign differs from previous ones
38. US Postal Service Website Left Data Exposed for Over a Year
39. .@Amazon unveils new settings to help users avoid S3 data leaks, but UpGuard's Chris Vickery, who uncovered most #AWS exposures,
40. Exclusive Cybaze ZLab – Yoroi – Hunting Cozy Bear, new campaign, old habits
41. Southwest Washington Regional Surgery Center suffered a Phishing attack
42. A #phishing campaign was recently found to be hijacking the traffic of @Trezor user #cryptocurrency wallets. Learn how such an
43. Software company OSIsoft has suffered a data breach
44. SAVE 50% FOR BLACK FRIDAY! Get half off FREEDOME VPN and TOTAL with coupon code BLACKFRIDAY.
45. DNS Shell – Tool to Compromise and Maintain Control Over Victim Machine
46. @FSecure fait son #BlackFriday ! Profitez de 50% de remise sur une sélection de produits !
47. 60 million users’ data were exposed by the US Postal Service

THREATS

48. 8 tips for avoiding phishing, malware, scams, and hacks while holiday shopping online
49. New Crypto-Miner Attacks Linux Machines, Kills Other Miners and Anti-Malware
50. DoS Vulnerabilities Found in Linux Kernel, Unpatched
51. Apache Hadoop spins cracking code injection vulnerability YARN
52. German e-government SDK patched against ID spoofing vulnerability
53. Malware scum want to build a Linux botnet using Mirai
54. US Postal Service Plugs API Flaw - One Year Later
55. VMware fixed Workstation flaw disclosed at the Tianfu Cup PWN competition
56. Adobe Flash Player Remote Code Execution Vulnerability Threat Alert
57. Old Printer Vulnerabilities Die Hard
58. VMware Patches Workstation Flaw Disclosed at Hacking Contest
59. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
60. Black Friday special by Emotet: Filling inboxes with infected XML macros
61. Black Friday special by Emotet: Filling inboxes with infected XML macros
62. Cryptocurrency ‘minting’ flaw could have leached money from exchanges
63. Ukrainian police arrest hacker who infected over 2,000 users with DarkComet RAT
64. USPS Bug affects 60 Million Users, Finally Fixed.
65. German eID vulnerability allows hackers to change identities
66. VMware patches guest-to-host malware vulnerability
67. Internet connected devices might be the hot item for Christmas this year, but are they secure?
68. Hacker says USPS ignored serious security flaw for over a year
69. #WebCache poisoning poses a serious threat to #BrowserSecurity. Learn how #hackers can use unkeyed inputs for malicious intent from expert
70. SMBs suffered the brunt of ransomware attacks in 2018
71. Best way to Remove Malware on Mac, Including Other Unwanted Apps
72. A #phishing campaign was recently found to be hijacking the traffic of @Trezor user #cryptocurrency wallets. Learn how such an
73. CVE-2018-6983: integer overflow vulnerability in VMware Workstation and Fusion
74. The number of ransomware attacks on individuals has come down as it has become harder to get them to pay,
75. New Crypto Malware Spreading that Infects Linux Machines & Removes Anti-Virus
76. Over 500k Play Store users have installed 13 games that contain malware

CRIME

77. Data breach in OSIsoft
78. US Says China Increased Hacking over Trade Dispute
79. Synthetic identity fraud to drive $48 billion in annual losses by 2023 – Juniper Research
80. Software company OSIsoft has suffered a data breach
81. The team discuss continuing activity by the Magecart group, as well as the ways in which #cybercriminals are gearing up

POLITICS

82. NUI Galway’s Problem: Misplaced USB Flash Drive Containing Unencrypted Student Records
83. US Says China Increased Hacking over Trade Dispute
84. Synthetic identity fraud to drive $48 billion in annual losses by 2023 – Juniper Research
85. Exclusive Cybaze ZLab – Yoroi – Hunting Cozy Bear, new campaign, old habits